Dependabot fails to update a package.json without a lock file

[mshima]

Is there an existing issue for this?

• I have searched the existing issues

Package ecosystem

npm

Package manager version

11

Language version

No response

Manifest location and content before the Dependabot update

https://github.com/jhipster/generator-jhipster-nodejs/blob/7088b50ed53e223b97ac713ed8836bbb5b728814/generators/node-server/resources/package.json

dependabot.yml content

https://github.com/jhipster/generator-jhipster-nodejs/blob/7088b50ed53e223b97ac713ed8836bbb5b728814/.github/dependabot.yml

Updated dependency

No response

What you expected to see, versus what you actually saw

PRs to be rebased jhipster/generator-jhipster-nodejs#662 (comment)

Native package manager behavior

Works correctly.

Images of the diff or a link to the PR, issue, or logs

No response

Smallest manifest that reproduces the issue

No response

[ntkme]

Facing the same issue.

@kbukum1 It failed to detect npm engine version even after adding {"engines": {"npm": ">7"}} to package.json. However, after adding package-lock.json suddenly was able to guess the npm engine version.

[ntkme]

Adding "packageManager": "[email protected]" to package.json works, while "engines": {"npm": ">7"} does not.

@kbukum1 It looks like a bug: #11392

[mshima]

Yes, I fixed by adding packageManager to package.json.
https://github.com/jhipster/generator-jhipster-nodejs/blob/0d592be3c47f8df9abd552580b8e4d0eb99330cd/generators/node-server/resources/package.json#L68

[bcomnes]

This is a serious regression. What used to work for years suddenly does not.

[kbukum1]

The issue has been fixed:

• Fix Unsupported Error When Npm Version Not Detected #11430